23139 matches found
Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30617 Policy bypass in Blink
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Services for NFS ONCRPC XDR Driver Information Disclosure Vulnerability
...
Windows Print Spooler Elevation of Privilege Vulnerability
...
HEVC Video Extensions Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Information Disclosure Vulnerability
...
Windows Desktop Bridge Elevation of Privilege Vulnerability
...
Chromium: CVE-2021-30536 Out of bounds read in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Windows Container Manager Service Elevation of Privilege Vulnerability
...
Visual Studio Code Remote Code Execution Vulnerability
...
Windows Desktop Bridge Denial of Service Vulnerability
...
Microsoft splwow64 Information Disclosure Vulnerability
An information disclosure vulnerability exists in how splwow64.exe handles certain calls. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system low-integrity to medium-integrity. This vulnerability by itself does not allow...
Windows Kernel Information Disclosure Vulnerability
An information disclosure vulnerability exists when the Windows kernel improperly initializes objects in memory. To exploit this vulnerability, an authenticated attacker could run a specially crafted application. An attacker who successfully exploited this vulnerability could obtain information t...
Microsoft Excel Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Microsoft Excel software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the current user. If the current user is logged on with...
Availability of updates for Microsoft software utilizing the Autodesk FBX library
Microsoft is announcing the release of updates to address multiple vulnerabilities found in the Autodesk FBX library which is integrated into certain Microsoft applications. Details about the vulnerabilities can be found here - https://www.autodesk.com/trust/security-advisories/adsk-sa-2020-0002...
Remote Desktop Services Remote Code Execution Vulnerability
A remote code execution vulnerability exists in Remote Desktop Services – formerly known as Terminal Services – when an authenticated attacker abuses clipboard redirection. An attacker who successfully exploited this vulnerability could execute arbitrary code on the victim system. An attacker cou...
Windows ALPC Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call ALPC. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the local system. An attacker could then install programs; view...
Device Guard Code Integrity Policy Security Feature Bypass Vulnerability
A security feature bypass vulnerability exists in Device Guard that could allow an attacker to inject malicious code into a Windows PowerShell session. An attacker who successfully exploited this vulnerability could inject code into a trusted PowerShell process to bypass the Device Guard Code...
Microsoft Malware Protection Engine Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Microsoft Malware Protection Engine does not properly scan a specially crafted file, leading to memory corruption. An attacker who successfully exploited this vulnerability could execute arbitrary code in the security context of the LocalSyste...
Scripting Engine Information Disclosure Vulnerability
An information disclosure vulnerability exists when the scripting engine does not properly handle objects in memory in Microsoft browsers. An attacker who successfully exploited the vulnerability could obtain information to further compromise the user’s system. In a web-based attack scenario, an...
Windows Graphics Component Remote Code Execution Vulnerability
A remote code execution vulnerability exists due to the way the Windows Graphics Component handles objects in memory. An attacker who successfully exploited the vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or creat...
Microsoft DirectX Graphics Kernel Subsystem Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Windows improperly handles objects in memory and incorrectly maps kernel memory. In a local attack scenario, an attacker could exploit this vulnerability by running a specially crafted application to take control over the affected system. An...
Microsoft Office Graphics Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Office graphics component improperly handles specially crafted embedded fonts. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delet...
Windows TCP/IP Remote Code Execution Vulnerability
Sensitive data storage in improperly locked memory in Windows TCP/IP allows an unauthorized attacker to execute code over a network...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
Windows Win32 Kernel Subsystem Elevation of Privilege Vulnerability
...
Windows Authentication Elevation of Privilege Vulnerability
...
Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
Microsoft Outlook Information Disclosure Vulnerability
...
.NET, .NET Framework, and Visual Studio Elevation of Privilege Vulnerability
...
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Hackerone: CVE-2023-38545 SOCKS5 heap buffer overflow
...
Layer 2 Tunneling Protocol Remote Code Execution Vulnerability
...
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
...
3D Builder Remote Code Execution Vulnerability
...
Microsoft Identity Linux Broker Remote Code Execution Vulnerability
...
Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability
...
Chromium: CVE-2023-4355 Out of bounds memory access in V8
This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...
Microsoft Message Queuing (MSMQ) Remote Code Execution Vulnerability
...
Windows Bluetooth A2DP driver Elevation of Privilege Vulnerability
...
Microsoft Office Security Feature Bypass Vulnerability
...
.NET and Visual Studio Remote Code Execution Vulnerability
...
AutoDesk: CVE-2023-27910 stack buffer overflow vulnerability in Autodesk® FBX® SDK 2020 or prior
...
Remote Desktop Client Remote Code Execution Vulnerability
...
Microsoft SharePoint Server Spoofing Vulnerability
...
Microsoft Exchange Server Remote Code Execution Vulnerability
...
Windows Installer Information Disclosure Vulnerability
...